Base 64 and Unicode tricks break LLM chatbot filters

LLM chatbot content filters can be bypassed by encoding banned words in Base64 or in Unicode escape sequences. The filter reading the prompt sees characters instead of language, the model decodes the text as a task, then repeats it back. A pretext such as a fake medical emergency gives the model a reason to comply, and asking for the reply as JSON makes it treat the output as data rather than speech. Defense in depth stops it, and prompt injection is number one on the OWASP Top 10 for LLM applications. submitted by /u/_clickfix_ [link] [comments]

from hacking: security in practice https://ift.tt/VdKSf7w